Small WordPress plugins that do one job well.
No suites, no bloat, no tracking. Each plugin is a single, readable file you can audit.
REST Lock
Lock the WordPress REST API for logged-out visitors without breaking forms, shops or the editor. Imports from Disable REST API.
In WordPress.org review